Begins the multi-factor enrollment flow for the signed-in user by issuing a setup challenge and, when applicable, returning authenticator bootstrap data.
Session token stored in a cookie after user signs in, prefixed with __Secure if on https
The string (id or name, depending on the credentials)
MFA setup challenge created.
authenticator, email setup Present when the user is enrolling an authenticator app.
Base32 secret returned for authenticator enrollment.
Masked email address used for email OTP delivery.